[#45300061] Check workspace permissions instead of fetching members list.

The members list could potentially be very large and there was already a
framework in place to check permissions in the workspace (for the
'Import File' button, for example), so we added a new 'create_work_flow'
permission and used that instead.